Proxies SSH agent requests to the real agent, intercepting Sign/SignWithFlags for approval via the same broker flow (notification + persist). Key fingerprints can be persisted to auto-approve future sign requests.
Core elevation broker that replaces the superpowerd adapter. Handles command execution outside the sandbox with human-in-the-loop approval via desktop notifications. - Policy store: YAML-backed global policy + in-memory session policies - Request lifecycle: 300s TTL, approve/deny/persist resolution - Command execution: bash -c with caller env/cwd, streaming d/x frames - SO_PEERCRED for caller identification - NotifyFunc callback for UI integration (D-Bus, 9P, etc.)
ollie
Levi Neely